CompTIA N10-008 Online Practice Questions and Exam Preparation

CompTIA N10-008 Online Questions & Answers

• Question 881:

  A customer hired a network consultant to provide advice on the installation of new wireless access. The customer has several devices that operate in either the 5.0GHz range or the 2.4GHz range, and the best performance must be available. Which of the following standards should the technician suggest?

  A. 802.11a
  B. 802.11b
  C. 802.11g
  D. 802.11n
  D. 802.11n

  ---

  Explanation/Reference:

  802.11n operates in both the 2.4GHz and 5.0GHz frequency bands, providing support for multiple-input multiple-output (MIMO) technology, which improves performance and range. It offers higher data rates and improved reliability compared to earlier standards like 802.11a, 802.11b, and 802.11g. Therefore, it would be the most suitable option for the customer's requirements.

• Question 882:

  A network engineer is investigating reports of poor network performance. Upon reviewing a device configuration, the engineer finds that duplex settings are mismatched on both ends. Which of the following would be the MOST likely result of this finding?

  A. Increased CRC errors
  B. Increased giants and runts
  C. Increased switching loops
  D. Increased device temperature
  A. Increased CRC errors

  ---

  Explanation/Reference:

  The different duplex settings on both ends of a connection can cause a mismatch in the flow control (sending data at different speed), leading data collisions. These collisions can result in corrupted data and increase the number of CRC errors.

• Question 883:

  Which of the following antenna types would most likely be used in a network repeater that is housed in a central point in a home office?

  A. Omnidirectional
  B. Parabolic
  C. High-gain
  D. Patch
  A. Omnidirectional

• Question 884:

  A technician is checking network devices to look for opportunities to improve security. Which of the following toots would BEST accomplish this task?

  A. Wi-Fi analyzer
  B. Protocol analyzer
  C. Nmap
  D. IP scanner
  C. Nmap

  ---

  Explanation/Reference:

  Nmap is a tool that can be used to scan and identify network devices and can help identify potential security vulnerabilities. Wi-Fi analyzer is used to analyze wireless networks, protocol analyzers are used to analyze network traffic, and IP scanners are used to discover devices on a network.

• Question 885:

  Which of the following BEST describes a spirt-tunnel client-to-server VPN connection?

  A. The client sends an network traffic down the VPN tunnel
  B. The client has two different IP addresses that can be connected to a remote site from two different ISPs to ensure availability
  C. The client sends some network traffic down the VPN tunnel and other traffic to the local gateway.
  D. The client connects to multiple remote sites at the same time
  C. The client sends some network traffic down the VPN tunnel and other traffic to the local gateway.

  ---

  Explanation/Reference:

  In a split-tunnel VPN, the client can access both the local network and the remote network simultaneously, with some network traffic sent through the VPN tunnel and other traffic sent to the local gateway. This approach allows for more efficient use of bandwidth and reduces the load on the VPN server. It also allows the client to continue accessing local resources while connected to the remote network.

• Question 886:

  Which of the following would be used to indicate when unauthorized access to physical internal hardware has occurred?

  A. Motion detectors
  B. Radio frequency identification tags
  C. Tamper evident seal
  D. Locking racks
  C. Tamper evident seal

  ---

  Explanation/Reference:

  A tamper-evident seal is used to indicate when unauthorized access to physical internal hardware has occurred. These seals are designed to break or show visible signs of tampering if someone tries to open or access a piece of equipment or hardware. This provides a visual indication that unauthorized access or tampering has taken place, alerting security personnel to investigate further.

• Question 887:

  A network technician needs to determine the IPv6 address of a malicious website. Which of the following record types would pre-ride this information?

  A. A
  B. AAAA
  C. CNAME
  D. PTR
  B. AAAA

  ---

  Explanation/Reference:

  The IPv6 address of a website can be determined by looking up the website's AAAA (quad-A) record.

  A AAAA record is a type of DNS record that maps a domain name to an IPv6 address. It is used to associate a hostname with an IPv6 address in the DNS system. When a client computer performs a DNS lookup for a hostname, it will query the DNS server for the hostname's AAAA record to find the corresponding IPv6 address.

  An A record, CNAME record and PTR record are used for different purposes. An A record maps a domain name to an IPv4 address, a CNAME record maps a domain name to another domain name and a PTR record is used to map an IP address to a hostname, it's used for reverse DNS lookups. So, in this case, to determine the IPv6 address of a malicious website, the technician should look for the AAAA record.

• Question 888:

  A customer has asked a technician to upgrade the wireless router to the fastest speed possible. The technician performs a site survey and notices several older devices will not be able to connect to router that operates In the 5GHz range. Which of the following options should the technician suggest to the customer?

  A. 802. 11a
  B. 802. 11ac
  C. 802. 11b
  D. 802. 11n
  B. 802. 11ac

• Question 889:

  A security team updated a web server to require https:// in the URL. Although the IP address did not change, users report being unable to reach the site. Which of the following should the security team do to allow users to reach the server again?

  A. Configure the switch port with the correct VLAN.
  B. Configure inbound firewall rules to allow traffic to port 443.
  C. Configure the router to include the subnet of the server.
  D. Configure the server with a default route.
  B. Configure inbound firewall rules to allow traffic to port 443.

  ---

  Explanation/Reference:

  One possible reason why users are unable to reach the site after the security team updated the web server to require https:// in the URL is that the firewall rules are blocking the traffic to port 443. Port 443 is the default port for HTTPS, which is the protocol that encrypts and secures the web communication. If the firewall rules do not allow inbound traffic to port 443, then users will not be able to access the web server using HTTPS12. To troubleshoot this issue, the security team should configure inbound firewall rules to allow traffic to port 443. This can be done by using the firewall-cmd command on RHEL 8.2, which is a tool that manages firewalld, the default firewall service on RHEL. The command to add a rule to allow traffic to port 443 is: firewall-cmd --permanent --add-port=443/tcp The --permanent option makes the rule persistent across reboots, and the --add-port option specifies the port number and protocol (TCP) to allow. After adding the rule, the security team should reload the firewalld service to apply the changes: firewall-cmd --reload The security team can verify that the rule is active by using this command: firewall-cmd --list-ports The output should show 443/tcp among the ports that are allowed34. The other options are not relevant to troubleshooting this issue. Configuring the switch port with the correct VLAN may help with network segmentation or isolation, but it will not affect the HTTPS protocol or port. Configuring the router to include the subnet of the server may help with network routing or connectivity, but it will not enable HTTPS communication. Configuring the server with a default route may help with network access or reachability, but it will not allow HTTPS traffic.

• Question 890:

  Network users reported that a recent firmware upgrade to a firewall did not resolve the issue that prompted the upgrade. Which of the following should be performed NEXT?

  A. Reopen the service ticket, request a new maintenance window, and roll back to the anterior firmware version.
  B. Gather additional information to ensure users' concerns are not been caused by a different issue with similar symptoms.
  C. Employ a divide-and-conquer troubleshooting methodology by engaging the firewall vendor's support.
  D. Escalate the issue to the IT management team in order to negotiate a new SLA with the user's manager.
  A. Reopen the service ticket, request a new maintenance window, and roll back to the anterior firmware version.
  B. Gather additional information to ensure users' concerns are not been caused by a different issue with similar symptoms.
  D. Escalate the issue to the IT management team in order to negotiate a new SLA with the user's manager.